Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
File:                     Dp4K_r9UpNIYr7rtVDB3G793d6k.cer (raw, json)
Hash identifier:          TQhj4Gk/rEroZDDX/dV7t5OqZC5Ql0NMqW0Jrau2Jns=
Subject key identifier:   0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7F3F5F2479E39EDD8C94EFEA2764E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:49:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49818
                          AS: 208154
                          IP: 81.22.228.0/22
                          IP: 185.75.192.0/22
                          IP: 2a03:4ca0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:f3:f5:f2:47:9e:39:ed:d8:c9:4e:fe:a2:76:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:49:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:bf:cb:34:88:c0:59:d1:51:de:71:76:dd:
                    06:ca:2e:ea:46:0e:71:26:21:28:16:f5:33:a9:3e:
                    3f:b0:a4:89:26:e0:92:f0:a7:1a:26:bb:4e:8a:1e:
                    2d:69:6a:2c:88:f8:de:fe:8c:34:57:12:8d:4a:df:
                    94:cc:14:4f:8c:a0:cd:5b:0a:7b:88:34:09:41:41:
                    cb:bc:9f:79:1f:d9:b7:19:d9:2d:ff:25:07:eb:35:
                    bc:ce:f4:81:f2:27:2e:88:63:a4:0e:4b:f0:9b:b0:
                    c4:e5:a2:2f:af:c3:3d:41:40:8c:d1:8a:85:d3:7e:
                    d8:86:e2:03:f3:6a:ee:9d:9a:7d:a3:dc:dc:8c:cb:
                    a4:08:b4:e7:66:bc:57:23:67:a5:cd:1a:d7:35:65:
                    c2:65:a5:9f:09:4b:37:78:e7:fe:1d:c1:ec:26:8a:
                    63:7c:d4:36:08:26:08:86:bf:02:a5:1d:bc:e5:90:
                    db:95:ec:89:8b:6f:3b:a5:dd:4b:e0:af:1c:45:39:
                    57:11:82:73:39:83:1a:1c:33:16:f0:71:53:d8:3b:
                    08:6a:17:d5:91:e1:85:50:56:b2:84:02:0d:a4:fb:
                    e7:f5:8e:7a:8c:a9:b8:94:be:99:ad:60:0c:bb:cb:
                    05:a0:7e:c2:56:61:04:67:d1:09:c1:ba:d9:6d:d7:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.228.0/22
                  185.75.192.0/22
                IPv6:
                  2a03:4ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49818
                  208154

    Signature Algorithm: sha256WithRSAEncryption
         92:92:6d:8b:e3:3d:87:c3:64:c0:d4:3b:b7:49:45:f5:e5:39:
         9c:06:55:9c:d5:c2:f5:fc:fb:fc:eb:7c:e0:97:f6:6e:fb:e1:
         4f:b3:06:13:ad:f4:f0:cb:ab:39:68:d5:f2:6d:e7:32:ae:9f:
         af:00:ac:e3:d7:b1:a1:9d:f8:a2:0a:28:0b:c6:96:34:8a:7a:
         7d:aa:0c:ec:bf:fa:52:59:7b:4a:0a:7c:e9:e8:fb:45:43:e5:
         03:79:95:a2:8e:46:68:ff:0b:4c:52:e5:3f:79:c0:50:cf:5d:
         dd:63:52:13:9e:17:38:2b:da:42:30:8c:51:85:bc:33:e2:a9:
         07:6d:3a:97:38:51:fa:2d:37:6b:04:eb:ac:a9:3e:cf:16:49:
         7e:ac:c3:0c:91:1b:b5:f5:69:95:4a:b6:70:2c:f2:34:01:26:
         14:fa:e6:24:15:40:0e:63:42:f4:aa:cc:f3:96:4c:20:23:8e:
         1a:2b:63:9b:be:36:ae:87:a7:a2:3a:0a:70:01:cf:9f:68:1a:
         33:0a:69:4d:3a:59:b5:96:9f:2c:6a:d5:cf:f2:47:86:f8:2d:
         6c:df:4a:46:74:bd:2a:ee:4c:16:94:54:45:f9:6e:b9:3b:57:
         45:13:38:fc:9c:12:b7:38:95:a4:0a:5a:19:18:11:c8:ee:e9:
         21:0e:d9:4d
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZQj1/P18keeOe3YyU7+onZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTllMGFmZWJmNTRhNGQyMThhZmJhZWQ1NDMwNzcxYmJmNzc3N2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY+/yzSIwFnRUd5xdt0Gyi7qRg5x
JiEoFvUzqT4/sKSJJuCS8KcaJrtOih4taWosiPje/ow0VxKNSt+UzBRPjKDNWwp7
iDQJQUHLvJ95H9m3Gdkt/yUH6zW8zvSB8icuiGOkDkvwm7DE5aIvr8M9QUCM0YqF
037YhuID82runZp9o9zcjMukCLTnZrxXI2elzRrXNWXCZaWfCUs3eOf+HcHsJopj
fNQ2CCYIhr8CpR285ZDbleyJi287pd1L4K8cRTlXEYJzOYMaHDMW8HFT2DsIahfV
keGFUFayhAINpPvn9Y56jKm4lL6ZrWAMu8sFoH7CVmEEZ9EJwbrZbdegWwIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFA6eCv6/VKTSGK+67VQwdxu/d3epMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2QyMjE0
MC1kOTYxLTQzNzctYjhjNi0zZWY1OTRlNmM2OTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvZDIyMTQw
LWQ5NjEtNDM3Ny1iOGM2LTNlZjU5NGU2YzY5Ni8xL0RwNEtfcjlVcE5JWXI3cnRW
REIzRzc5M2Q2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCURbkAwQCuUvAMA0EAgACMAcDBQAqA0ygMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDCmgIDAy0aMA0GCSqGSIb3DQEBCwUAA4IB
AQCSkm2L4z2Hw2TA1Du3SUX15TmcBlWc1cL1/Pv863zgl/Zu++FPswYTrfTwy6s5
aNXybecyrp+vAKzj17GhnfiiCigLxpY0inp9qgzsv/pSWXtKCnzp6PtFQ+UDeZWi
jkZo/wtMUuU/ecBQz13dY1ITnhc4K9pCMIxRhbwz4qkHbTqXOFH6LTdrBOusqT7P
Fkl+rMMMkRu19WmVSrZwLPI0ASYU+uYkFUAOY0L0qszzlkwgI44aK2Obvjauh6ei
OgpwAc+faBozCmlNOlm1lp8satXP8keG+C1s30pGdL0q7kwWlFRF+W65O1dFEzj8
nBK3OJWkCloZGBHI7ukhDtlN
-----END CERTIFICATE-----